Frank Lycops Nessus Web UI 2.3.3 - Persistent Cross-Site Scripting
webapps multiple CVE-2014-7280;OSVDB-112728

MWR InfoSecurity Moab < 7.2.9 - Authentication Bypass
webapps multiple CVE-2014-5300;OSVDB-112341

Pichaya Morimoto Laravel - 'Hash::make()' Password Truncation Security
remote multiple

Metasploit ManageEngine Eventlog Analyzer - Arbitrary File Upload (Metasploit)
remote multiple 8400 CVE-2014-6037;OSVDB-110642

Metasploit Railo 4.2.1 - Remote File Inclusion (Metasploit)
remote multiple 80 CVE-2014-5468;OSVDB-111448;OSVDB-111445

JoeV Jenkins 1.578 - Multiple Vulnerabilities
webapps multiple 8090 OSVDB-110834;OSVDB-110820

Michal Zalewski Mozilla Firefox 9.0.1 / Thunderbird 3.1.20 - Information Disclosure
remote multiple CVE-2014-1564;OSVDB-110716

Dolev Farhi Syslog LogAnalyzer 3.6.5 - Persistent Cross-Site Scripting
webapps multiple CVE-2014-6070;OSVDB-110689;OSVDB-110685

Prakhar Prasad Arachni Web Application Scanner Web UI - Persistent Cross-Site Scripting
webapps multiple CVE-2014-5469;OSVDB-110690

Claudio Viviani NRPE 2.15 - Remote Code Execution
remote multiple CVE-2014-2913;OSVDB-106007

Pedro Ribeiro ManageEngine DeviceExpert 5.9 - User Credential Disclosure
webapps multiple CVE-2014-5377;OSVDB-110522

Metasploit Mozilla Firefox - WebIDL Privileged JavaScript Injection (Metasploit)
remote multiple CVE-2014-1511;OSVDB-104594;CVE-2014-1510;OSVDB-104593

Eric Sesterhenn Granding MA300 - Weak Pin Encryption Brute Force
remote multiple CVE-2014-5381;OSVDB-110456

Eric Sesterhenn Granding MA300 - Traffic Sniffing Man In The Middle Fingerprint PIN Disclosure
remote multiple CVE-2014-5380;OSVDB-110460

Steffen Bauch ntopng 1.2.0 - Cross-Site Scripting Injection
webapps multiple OSVDB-110437;CVE-2014-5464

Pedro Ribeiro ManageEngine Password Manager - MetadataServlet.dat SQL Injection (Metasploit)
webapps multiple 8020 CVE-2014-3996;OSVDB-110198